ci: run shellcheck at warning severity

The first run reported only info-level notes (SC2015 in update.sh, SC2012 and SC2086 on the intentional glob in backup.sh), which made the job fail.
ci: add a race-detector step and shellcheck for the install scripts
2026-11-15 04:30:55 +08:00 · 2026-11-03 23:36:00 +01:00 · 2026-11-03 23:30:08 +01:00
1 changed files with 15 additions and 0 deletions
@@ -44,6 +44,21 @@ jobs:
        # as rotating failures in the agent package). Serial package execution
        # keeps the database state deterministic.
        run: go test -p 1 ./...
      - name: go test -race
        # Race detector on the packages that pass under -race today. ./server is
        # left out until it has been checked with -race against postgres.
        run: >-
          go test -race -p 1 ./agent ./cmd/artex ./config ./db ./evidence ./guard
          ./intercept ./llmpool ./llmrec ./mcphttp ./notify ./sidequestion ./traffic
  shell:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      # shellcheck is preinstalled on the ubuntu runners. -S warning: the scripts
      # currently have only info-level notes (intentional A && B || C chains in
      # update.sh, an unquoted glob in backup.sh's prune), so fail on warnings.
      - run: shellcheck -S warning install.sh update.sh start.sh scripts/backup.sh
  web:
    runs-on: ubuntu-latest